Static task
static1
Behavioral task
behavioral1
Sample
7a20c2761785251fe334b6e0d5f40fe2d46a441a7e2635ceecc83eb51ac35114.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
7a20c2761785251fe334b6e0d5f40fe2d46a441a7e2635ceecc83eb51ac35114.exe
Resource
win10v2004-20220812-en
General
-
Target
7a20c2761785251fe334b6e0d5f40fe2d46a441a7e2635ceecc83eb51ac35114
-
Size
155KB
-
MD5
2e807f31cdd055114b5f1fdc26687510
-
SHA1
b62cad3cf3ac7b98d2ea2a56988ec9e0d1f03742
-
SHA256
7a20c2761785251fe334b6e0d5f40fe2d46a441a7e2635ceecc83eb51ac35114
-
SHA512
72b7e437c65f3f8c0120a2bbe1b0dedee466cf158dcaa67aded797e22a76caa90662e0f421ef868188ed9e455a424e7e1ea8ec5c4d760491e25cd62ee77efcd9
-
SSDEEP
3072:tzr1NrFclCMF8BNCA6GVafIrjhfPre8wwALf536:tNJ+lCMFysAUKaR3
Malware Config
Signatures
Files
-
7a20c2761785251fe334b6e0d5f40fe2d46a441a7e2635ceecc83eb51ac35114.exe windows x86
5a59a0db239c32d900af243fc001acb5
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ReadFile
VirtualAlloc
CreateFileA
LeaveCriticalSection
EnterCriticalSection
ExpandEnvironmentStringsA
GetCurrentThreadId
SetUnhandledExceptionFilter
GetTickCount
QueryPerformanceCounter
SetLastError
LocalFree
FormatMessageA
SetConsoleCtrlHandler
GetLastError
UnhandledExceptionFilter
GetModuleHandleA
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
CreateProcessA
SearchPathA
GetStartupInfoA
GetModuleFileNameW
GetShortPathNameW
lstrcatW
lstrlenW
DeleteFileW
WriteFile
CloseHandle
CreateSemaphoreW
CreateFileW
GetVersionExW
user32
GetSystemMetrics
gdi32
GetStockObject
GetObjectW
SetTextColor
SetBkMode
CreatePen
SelectObject
Polyline
DeleteObject
CreateFontIndirectW
msvcrt
_except_handler3
_c_exit
_exit
_XcptFilter
_cexit
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
_vsnwprintf
__set_app_type
_controlfp
setlocale
mbstowcs
advapi32
RegOpenKeyW
RegCloseKey
RegOpenKeyExA
RegQueryValueExA
LookupPrivilegeValueW
AdjustTokenPrivileges
RegCreateKeyW
RegSetValueExW
RegQueryValueExW
RegOpenKeyExW
OpenProcessToken
Sections
.text Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data25 Size: 512B - Virtual size: 500B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data24 Size: 512B - Virtual size: 500B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data23 Size: 512B - Virtual size: 500B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data21 Size: 512B - Virtual size: 500B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data20 Size: 512B - Virtual size: 500B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data19 Size: 512B - Virtual size: 500B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data5 Size: 114KB - Virtual size: 114KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text14 Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
.text13 Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
.text12 Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
.text6 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
.text5 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
.rsrc Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 780B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ